Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.

Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw ...

In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...

Several products from Ubiquiti's UniFi ecosystem are affected by partly critical vulnerabilities. Admins should promptly ...

The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.

If you tend to copy/paste content from websites, you might be surprised to find yourself under the thrall of a ClickFix ...

Sentire says attacks began June 29 against a CVSS 9.6 OS command injection flaw that enables unauthenticated code execution.

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) ...

Security tooling is not written in a single language. Python powers most automation. C sits at the exploit layer. PowerShell ...

A vulnerability that can facilitate attacks on operational technology (OT) systems is being exploited in the wild ...

Microsoft is delivering tools to quickly configure Windows PCs as workstations for Windows and Linux development.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers actively exploiting flaws in Ubiquity UniFi OS and Lantronix serial-to-ethernet servers. According to the BOD ...